Free BCS Practitioner Certificate in Data Protection Exam PDP9 Exam Practice Test

How does the GDPR relate to cookies?

• The GDPR only applies where a cookie processes personal data
• The GDPR applies in all cases where cookies are used
• Where PECR is engaged only PECR will apply to the processing of personal data
• Websites only need an opt out of cookies if GDPR applies

Where a processor engages another processor ("sub-processor") to carry out processing activities on behalf of a controller, which of the following statements is CORRECT?

• The processor must receive prior written authorisation to use the sub-processor
• The processor may use the sub-processor without the written authorisation of the controller if it adheres to an approved code of conduct
• The processor may use the sub-processor without the written authorisation of the controller if the sub-processor signs a contract which reflects the same obligations as the contract with the controller
• The processor may use the sub-processor without the written authorisation of the controller if the processing is deemed to be low risk.

In which of the following circumstances would Privacy and Electronic Communications Regulation (PECR) NOT apply?

• Telephone marketing communications
• Postal marketing communications.
• Text marketing communications.
• Email marketing communications

Which of the below would be the BEST example of processing that could utilise the Public Interest Task lawful basis?

• A health authority processing the personal information of its staff in order to record all training undertaken
• A debt collection agency processing information relating to unpaid fines for misuse of community council car parking.
• A local authority processing the personal information of the person responsible for paying council tax
• A tax authority drops cookies on the devices of visitors to its website

Where are the definitions of "Public Authority" and "Public Bodies" found?

• Freedom of Information Act 2000 and Data Protection Act 2018
• GDPR and Data Protection Act 2018.
• Data Protection Act 2018 and PECR.
• Data Protection Act 2018 only

Which of the following is NOT a key requirement of independent supervisory authorities?

• Their leadership must change every four years
• They must operate independently.
• They review DPIAs in cases of unmitigated high risk
• They must provide each other with mutual assistance

What does NOT have an exemption prescribed under schedule 3 of the Data Protection Act 2018?

• Education data, examination scripts and marks
• Credit checking agency data
• Social Work Data.
• Health data

In the terms of their relevance under data protection legislation, how can CCTV images recorded in a supermarket BEST be described'?

• They are special category data as they identify special characteristics
• They are biometric data in the terms of the definition stipulated in the GDPR.
• The GDPR is only engaged where these are accompanied by text or other identifier
• They are personal data as they can be used to identify living human beings

Under which circumstances can the 'domestic purposes' exemption be used to justify non- compliance with the Data Protection Act 2018?An individual sells make up products for commission and uses social media to promote products to friends and familyA couple are planning their daughter's wedding and use excel to store contact details and dietary needs of the guestsAn individual employs a babysitter and stores her bank details in an encrypted document in order to make paymentsA pansh council keeps a spreadsheet to manage bookings of the village hall, it contains only contact information and time slotsA group of students are arranging a house party and using social media to invite people that they do and do not knowA, B, C, and E.B. C. D, and EB, and C

• B.C. and D

A company has twenty retail outlets in France and thirty retail outlets in Belgium The payroll department and the Data Protection Officer are based in Poland. The Company Board and administrative functions are based in Germany. Determine where the company's 'main establishment' would be

• Belgium
• France
• Germany
• Poland